8149 matches found
security flaw
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute...
CVE-2003-1348: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 name, or 3 title field...
konqueror XSS
The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...
CVE-2004-2725
Multiple cross-site scripting XSS vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.php, 2 the email parameter in b subscribe.php, and 3 the return and 4 title parameters in c forum2.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with 1 the title parameter or 2 a "title=" sequence in the PATHINFO, or a request to the download module with 3 the cat...
CVE-2007-5052
Multiple cross-site scripting XSS vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with 1 the title parameter or 2 a "title=" sequence in the PATHINFO, or a request to the download module with 3 the cat...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...
CVE-2007-4831
Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...
CVE-2007-4831: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c...
CVE-2007-4530
Multiple cross-site scripting XSS vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via 1 the errortext parameter to errorbox.html or 2 the oktitle parameter to okbox.html...
Multiple IRC NowPlaying scripts command injection
It's possible to inject IRC command thorugh unfiltered song titile...
CVE-2007-3743
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a bookmark with a long title...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...
CVE-2007-4090: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...
CVE-2007-3975
Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...
CVE-2007-3975: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...
Apple Safari for Windows书签标题缓冲区溢出漏洞
Apple Safari是一款WEB浏览器。 Windows平台下的Apple Safari处理书签标题存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 处理书签的标题字段超过1024字节，可使Windows平台下的Apple Safari触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Apple Safari 3.0.2 Beta for Windows 目前没有解决方案提供： http://www.apple.com/safari/ html head...